The Complete Splunk Core Certified Power User Course

Power User Certification Course Material, Exam Prep, Exam Tips, Practice Tests, SPLK-1002

What you'll learn

Complete Course material required to pass the Splunk Core Certified Power User exam.

Transforming Commands for Visualizations, Advanced Visualizations

Filtering and Formatting Results

Correlating Events in Splunk

Creating and Managing Fields

Creating Field Aliases and Calculated Fields

Creating Tags and Event Types

Creating and Using Macros

Creating and Using Workflow Actions

Creating Data Models

Using the Common Information Model (CIM) Add-On

Requirements

Knowledge and experience with Splunk Web: Splunk Basics, Basic Searching, Using Fields, SPL, Transforming Commands, Reports, Dashboards, Lookups, Alerts

No Splunk Knowledge? Take the Splunk Core Certified User Course by RylKim Solutions on Udemy.

Exam Prerequisites: No pre-requisites needed to take the Splunk Core Certified Power User exam.

Description

The Splunk Core Certified Power User Certification is one of the most sort after preliminary Certifications to validate Splunk skills. It is a prerequisite to multiple professional and expert Splunk Certifications, and is therefore the bridge you have to cross to become a Splunk expert. You no longer need to reference multiple online documents and try retaining unexplained answers from different question dumps as this all-in-one course provides everything you need:Complete Course material in line with Splunk's exam blueprintConcept driven comprehensive coverage of each exam topicExam tips (with answers) based on real exam questions to create a link with course materialQuizzes and practice tests from real exam questionsThe course is organized not only to help you pass the exam but gain knowledge that can help you improve your experience as well as standout in job interviews through understanding of concepts.The course is divided into 12 modules with the following topics covered in line with Splunk's official exam blueprint:Introduction & Training DataTransforming Commands for VisualizationsAdvanced VisualizationsFiltering & Formatting Search ResultsCorrelating EventsCreating & Managing FieldsCreating Field Aliases & Calculated FieldsCreating Tags & Event TypesCreating & Using MacrosCreating & Using Workflow ActionsCreating Data ModelsUsing The Common Information Model (CIM) Add-OnThe training data is based on Splunk's online documentation as well as real-time event generated data. We'll show you how to index this data in your own single instance deployment of Splunk so you can follow along with the exercises in this course. You should end up with a deployment of Splunk with knowledge objects such as fields extractions, Field Aliases, Calculated Fields, Tags, Event Types, Macros, Workflow Actions, Data Models, created as part of the Course. We'll also install and discuss the Splunk CIM which forms the foundation of Splunk's SIEM solution known as Splunk Enterprise Security, heavily used in Cybersecurity today. You can further use your deployment to practice as needed before taking your exam.Your instructor has 15 years of experience as an engineer, working in roles that involve getting actionable insights from some of the most complex data sources, holds 5 Splunk Certifications and has the ability to transform information into a form that is easy to consume, and provide more clarity. This course is based off more than 8 years of experience with Splunk, combined with Certifications. The material is organized to demystify Splunk, encourage, and get you going with this very useful centralized log management platform.Good Luck in your Splunk Journey!!!

Overview

Section 1: Module 1: Introduction & Training Data

Lecture 1 Welcome

Lecture 2 About Splunk Core Certified Power User Course

Lecture 3 Course & Exam Prerequisites

Lecture 4 Course Outline

Lecture 5 Add Training Data - Overview

Lecture 6 Add Training Data - Upload Files

Lecture 7 Add Training Data - Generate Events

Lecture 8 Add Training Data - Lookup Table Fields

Section 2: Module 2: Transforming Commands for Visualizations

Lecture 9 Module Overview

Lecture 10 Visualization Data Structures

Lecture 11 Types of Visualizations

Lecture 12 Statistics Tables

Lecture 13 The chart Command - Single Series

Lecture 14 The chart Command - Multi-Series

Lecture 15 The timechart Command - Single Series

Lecture 16 The timechart Command - Multi-Series

Lecture 17 Scatter & Bubble Charts

Lecture 18 Formatting Statistics Tables

Lecture 19 Formatting Visualizations

Section 3: Module 3: Advanced Visualizations

Lecture 20 Module Overview

Lecture 21 Single Value Visualizations

Lecture 22 Maps

Lecture 23 Creating a Trendline

Section 4: Module 4: Filtering & Formatting Results

Lecture 24 Module Overview

Lecture 25 Using the eval Command

Lecture 26 Calculating Fields

Lecture 27 Rounding Field Values - round Function

Lecture 28 Converting Fields - tostring Function

Lecture 29 String Concatenation

Lecture 30 The eval Function

Lecture 31 The if Function

Lecture 32 The case Function

Lecture 33 The fillnull Command

Lecture 34 Filtering Search Results - search Command

Lecture 35 Filtering Search Results - where Command

Section 5: Module 5: Correlating Events

Lecture 36 Module Overview

Lecture 37 Correlating Events - Overview

Lecture 38 The Transaction Command

Lecture 39 Filtering Transactions

Lecture 40 Transaction Constraints

Lecture 41 Report on Transactions

Lecture 42 Transaction vs Stats

Section 6: Module 6: Creating & Managing Fields

Lecture 43 Module Overview

Lecture 44 Overview of Knowledge Objects

Lecture 45 Why Extract Fields from Data?

Lecture 46 Structured vs Unstructured Data

Lecture 47 Field Discovery (Auto-Extraction)

Lecture 48 Field Extractions with Knowledge Objects

Lecture 49 Delimiter Field Extractions

Lecture 50 RegEx Field Extractions

Lecture 51 Modify RegEx Expressions

Section 7: Module 7: Creating Field Aliases & Calculated Fields

Lecture 52 Module Overview

Lecture 53 What is a Field Alias?

Lecture 54 Creating Field Aliases

Lecture 55 What is a Calculated Field?

Lecture 56 Creating Calculated Fields

Section 8: Module 8: Creating Tags & Event Types

Lecture 57 Module Overview

Lecture 58 What are Tags?

Lecture 59 Creating Tags

Lecture 60 Managing Tags

Lecture 61 What are Event Types?

Lecture 62 Creating Event Types

Lecture 63 Tagging Event Types

Lecture 64 Event Types vs Saved Reports

Section 9: Module 9: Creating & Using Macros

Lecture 65 Module Overview

Lecture 66 What is a Macro?

Lecture 67 Creating a Basic Macro

Lecture 68 Creating a Macro with Arguments

Lecture 69 Validating Macro Arguments

Section 10: Module 10: Creating & Using Workflow Actions

Lecture 70 Module Overview

Lecture 71 What is a Workflow Action?

Lecture 72 Creating a GET Workflow Action

Lecture 73 Creating a POST Workflow Action

Lecture 74 Creating a Search Workflow Action

Section 11: Module 11: Creating Data Models

Lecture 75 Module Overview

Lecture 76 What is a Data Model?

Lecture 77 Creating a Data Model

Lecture 78 Adding Fields to a Data Model - Auto-Extracted

Lecture 79 Adding Fields to a Data Model - Eval Expression

Lecture 80 Adding Fields to a Data Model - Lookup

Lecture 81 Adding Fields to a Data Model - Regular Expression

Lecture 82 Adding Fields to a Data Model - Geo IP

Lecture 83 Adding a Root Transaction Dataset

Lecture 84 Adding Child Datasets

Lecture 85 Using Pivot Tool

Lecture 86 Data Model Permissions & Acceleration

Lecture 87 Download & Upload Data Models

Section 12: Module 12: Using the Common Information Model (CIM) Add-On

Lecture 88 Module Overview

Lecture 89 What is Splunk CIM?

Lecture 90 Splunk CIM Data Models

Lecture 91 Installing Splunk CIM Add-On

Lecture 92 Using Splunk CIM Add-On - Create Tags

Lecture 93 Using Splunk CIM Add-On - Create Aliases

Lecture 94 Using Splunk CIM Add-On - Create Missing Fields

Lecture 95 Validating Against Data Model

Section 13: Practice Tests

Splunk users who want to pass the Splunk Core Certified Power User exam.,Splunk users who want to grow their knowledge and experience with Splunk Web.,Splunk users planning to take professional and expert Certifications in Splunk: Splunk Core Certified Advanced Power User, Splunk Enterprise Certified Admin, Splunk Cloud Certified Admin, Splunk Enterprise Certified Architect, Splunk Core Certified Consultant.,Splunk users who want to have competitive advantage in job market.